Privacy Policy
Effective: October 2025 Last Updated: October 2025
TediousTech Solutions LLC (“we,” “us,” or “our”) operates the website tedioustech.solutions. This Privacy Policy explains how we collect, use, and protect your information.
1. Who We Are
Legal Entity: TediousTech Solutions LLC Address: Tampa, Florida, United States Privacy Contact / DPO: Logan Meriwether Email: security@tedioustech.solutions
2. What We Collect and Why
We only collect the minimum information needed to operate our services.
| Type of Data | Examples | Purpose | Lawful Basis |
|---|---|---|---|
| Account & Auth Data | Email, password (hashed) | Register and authenticate users via Supabase | Contract / Legitimate Interest |
| Scheduling Data | Name, email, selected time slot | Confirm meetings and send reminders | Contract / Legitimate Interest |
| Billing Data | Payment details via Stripe | Process transactions securely | Contract / Legal Obligation |
| Email & Delivery Data | Open, click, bounce events | Ensure emails are delivered successfully | Legitimate Interest |
| Analytics & Telemetry | Session ID, device, region, route, UTM parameters | Improve site performance and understand usage | Consent (where required) |
We do not store IP addresses in analytics and we do not share personal data with third-party advertisers.
3. How We Collect Data
- Directly from you when you create an account, schedule a meeting, or contact us.
- Automatically through a first-party analytics system (no third-party trackers).
- Via integrations such as Google Calendar (for meetings) and Stripe (for payments).
4. Cookies and Tracking
We use only essential and first-party analytics cookies.
- session_id (anonymous) – maintains your browsing session.
- consent_status – records your cookie preferences.
- No advertising or cross-site tracking cookies.
- We honor browser Do Not Track (DNT) and Global Privacy Control (GPC) signals.
In regions requiring consent (e.g., EU/UK), analytics and preference cookies are blocked until you opt in.
5. How We Use Analytics
We log website visits to understand performance and improve services. Our event logs include: requestid, sessionid, route, UTM, device type, browser, and derived region. No IP addresses or names are stored. Retention: 180 days, then securely deleted via automated job.
6. How We Send Emails
Transactional emails (meeting confirmations, reminders, and updates) are sent through Resend.
You can opt out of non-essential messages anytime.
- From: notify@tedioustech.solutions or meetings@tedioustech.solutions
- Webhooks collect delivery metrics (open, click, bounce) for reliability only.
7. How We Share Data
We share data only with our processors under signed agreements:
| Processor | Purpose | Location | Policy |
|---|---|---|---|
| Supabase | Authentication, database, analytics | US/EU (PostgreSQL) | https://supabase.com/privacy |
| Vercel | Hosting and edge delivery | Global (US/EU) | https://vercel.com/legal/privacy-policy |
| Calendar/Meet scheduling | Global | https://policies.google.com/privacy | |
| Resend | Transactional emails | US | https://resend.com/privacy |
| Stripe | Payment processing | US/EU | https://stripe.com/privacy |
Each acts as a data processor under a data processing agreement.
8. Retention
| Category | Retention Period |
|---|---|
| Analytics | 180 days |
| Meeting Records | 1 year |
| Temporary Holds | 7 days |
| Account Data | Active period + 1 year after closure |
| Billing Data | As required by law (usually 7 years) |
| Email/Webhook Logs | Up to 1 year, unless legal obligations require longer |
9. International Data Transfers
Your data may be processed in the U.S. or other locations. Where required, we rely on Standard Contractual Clauses (SCCs) to ensure equivalent protection under GDPR and UK GDPR.
10. Your Rights
Depending on your region, you may have the right to: access or export your data; request correction or deletion; restrict or object to processing; opt out of data sharing or sale (California). To make a request, email security@tedioustech.solutions. We verify identity via your account email and respond within 30 days.
11. Children
Our services are not directed to children under 16. We do not knowingly collect information from minors.
12. Security
We use Supabase Row-Level Security (RLS), HTTPS, and encrypted database connections. Access to personal data is role-based and audited.
13. Updates to This Policy
We may update this policy as our services evolve. Changes will be posted here with a revised “Last Updated” date.
14. Contact Us
For privacy questions, contact: security@tedioustech.solutions
15. References
This policy complements our future Terms of Service (/terms) and Data Processing Addendum (/dpa).